Page MenuHomePhabricator

decommission cloudnet1003.eqiad.wmnet
Closed, ResolvedPublicRequest

Description

This task will track the decommission-hardware of server cloudnet1003.eqiad.wmnet

With the launch of updates to the decom cookbook, the majority of these steps can be handled by the service owners directly. The DC Ops team only gets involved once the system has been fully removed from service and powered down by the decommission cookbook.

Steps for service owner:

  • - all system services confirmed offline from production use
  • - set all icinga checks to maint mode/disabled while reclaim/decommmission takes place. (likely done by script)
  • - remove system from all lvs/pybal active configuration
  • - any service group puppet/hiera/dsh config removed
  • - remove site.pp, replace with role(spare::system) recommended to ensure services offline but not 100% required as long as the decom script is IMMEDIATELY run below.
  • - login to cumin host and run the decom cookbook: cookbook sre.hosts.decommission <host fqdn> -t <phab task>. This does: bootloader wipe, host power down, netbox update to decommissioning status, puppet node clean, puppet node deactivate, debmonitor removal, and run homer.
  • - remove all remaining puppet references and all host entries in the puppet repo
  • - reassign task from service owner to DC ops team member and site project (ops-sitename) depending on site of server

End service owner steps / Begin DC-Ops team steps:

  • - system disks removed (by onsite)
  • - determine system age, under 5 years are reclaimed to spare, over 5 years are decommissioned.
  • - IF DECOM: system unracked and decommissioned (by onsite), update netbox with result and set state to offline
  • - IF DECOM: mgmt dns entries removed.

Event Timeline

Change 839628 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/puppet@production] cloudnet1003/1004: make them spare servers

https://gerrit.wikimedia.org/r/839628

Change 839628 merged by Arturo Borrero Gonzalez:

[operations/puppet@production] cloudnet1003/1004: make them spare servers

https://gerrit.wikimedia.org/r/839628

Cookbook cookbooks.sre.hosts.reimage was started by aborrero@cumin1001 for host cloudnet1003.eqiad.wmnet with OS bullseye

cookbooks.sre.hosts.decommission executed by andrew@cumin1001 for hosts: cloudnet1003.eqiad.wmnet

  • cloudnet1003.eqiad.wmnet (FAIL)
    • Host not found on Icinga, unable to downtime it
    • Found physical host
    • Management interface not found on Icinga, unable to downtime it
    • Unable to connect to the host, wipe of swraid, partition-table and filesystem signatures will not be performed: Cumin execution failed (exit_code=2)
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

ERROR: some step on some host failed, check the bolded items above

cookbooks.sre.hosts.decommission executed by andrew@cumin1001 for hosts: cloudnet1003.eqiad.wmnet

  • cloudnet1003.eqiad.wmnet (FAIL)
    • No DNS record found for the mgmt interface cloudnet1003.mgmt.eqiad.wmnet, trying the asset tag one: wmf7115.mgmt.eqiad.wmnet
    • Host not found on Icinga, unable to downtime it
    • Found physical host
    • Management interface not found on Icinga, unable to downtime it
    • Unable to connect to the host, wipe of swraid, partition-table and filesystem signatures will not be performed: Cumin execution failed (exit_code=2)
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

ERROR: some step on some host failed, check the bolded items above

cookbooks.sre.hosts.decommission executed by andrew@cumin1001 for hosts: cloudnet1004.eqiad.wmnet

  • cloudnet1004.eqiad.wmnet (FAIL)
    • Host not found on Icinga, unable to downtime it
    • Found physical host
    • Management interface not found on Icinga, unable to downtime it
    • Unable to connect to the host, wipe of swraid, partition-table and filesystem signatures will not be performed: Cumin execution failed (exit_code=2)
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB

ERROR: some step on some host failed, check the bolded items above

This will need a manual wipe of the drives.

cc @Volans regarding the failure to wipe the drives. Feel free to investigate/rerun this if you like! Otherwise I'll leave it to the dcops folks to wipe things.

Change 839706 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):

[operations/puppet@production] Remove refs to cloudnet100[34]

https://gerrit.wikimedia.org/r/839706

Change 839706 merged by Andrew Bogott:

[operations/puppet@production] Remove refs to cloudnet100[34]

https://gerrit.wikimedia.org/r/839706

Andrew updated the task description. (Show Details)
Andrew added a project: ops-eqiad.

cc @Volans regarding the failure to wipe the drives. Feel free to investigate/rerun this if you like! Otherwise I'll leave it to the dcops folks to wipe things.

The host was not reachable by cumin as reported above:

Unable to connect to the host, wipe of swraid, partition-table and filesystem signatures will not be performed: Cumin execution failed (exit_code=2)

Was the host reachable via SSH? If not there is nothing to investigate, the above step can currently be performed only if the host is reachable via SSH.

Cookbook cookbooks.sre.hosts.reimage started by aborrero@cumin1001 for host cloudnet1003.eqiad.wmnet with OS bullseye executed with errors:

  • cloudnet1003 (FAIL)
    • Downtimed on Icinga/Alertmanager
    • Disabled Puppet
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details
Jclark-ctr updated the task description. (Show Details)
Jclark-ctr added a subscriber: Cmjohnson.